$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: e8Ge8IC7XfLm+j47Vv5y4F4c3TNQEsLEzthiDhx6Y0k= Subject key identifier: A0:F9:10:FD:0C:02:58:35:AF:0E:86:BB:2B:CB:BF:DD:14:B4:1E:09 Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 08981BF7DE74DDA02DC58CBC2D73CADCF1DD7157 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 04D7 Signing time: Thu 26 Mar 2026 00:29:01 +0000 Manifest this update: Thu 26 Mar 2026 00:29:01 +0000 Manifest next update: Mon 30 Mar 2026 00:29:01 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 8vb3J5QiPQDtpZT2rfnwy96rd9oz4X2yP2KpF77TwZc=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: G+8ETfqVvYfAh6JlCKA8JPA6/AUa1Cklyavq3LVrGqs=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: lGQpcEhDIEhFjIk2i8v7KasFEWckt3oZL1je6gcWykU=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: vqmIWZTDw4X9+245sbGxATsB3EOigrzzk10IK4pKFII=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:98:1b:f7:de:74:dd:a0:2d:c5:8c:bc:2d:73:ca:dc:f1:dd:71:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Mar 26 00:29:01 2026 GMT Not After : Mar 30 00:29:01 2026 GMT Subject: serialNumber=d1393e9884ac7614d091a28e51fc0a375c958732ab94db9050ad7a26a9e6eb56, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:ab:8d:6a:bc:c7:9c:9c:1a:d7:4e:7e:7d: f7:d9:d1:86:1c:35:6a:cf:2e:4e:ab:d9:ae:35:77: f7:06:94:ad:ca:1d:5d:99:fe:15:dc:08:4c:da:9b: c7:00:6b:e9:43:5b:fd:11:88:d8:a2:d7:eb:cd:f2: 71:32:ea:6c:1a:74:5d:6b:a0:16:62:72:1a:e1:54: ba:ee:06:52:94:85:65:4b:13:10:d9:54:fb:0c:c3: 17:af:95:58:fd:f8:ff:90:23:ac:45:7d:c6:af:9e: 72:95:f7:b0:64:72:b6:a5:8f:92:28:67:a0:ea:74: c0:42:3a:13:92:f2:e0:81:1f:90:e8:72:e0:46:ce: a6:62:7b:21:b1:b3:13:90:31:e2:a0:35:84:c7:42: ff:70:a9:59:0b:3c:9b:5c:d2:b1:39:e1:3d:e1:7d: 69:e8:b9:f0:bc:4d:a6:63:e2:33:87:3e:86:13:d2: 21:8e:44:e6:e5:48:eb:79:fc:89:d4:58:0c:db:00: 46:05:bd:e1:df:a1:af:26:c3:20:57:9e:85:a3:6c: 2a:aa:07:6f:9d:14:0f:7a:3a:f4:9c:59:d4:06:07: 13:4a:fa:33:a7:ba:a0:75:12:f1:53:87:e7:68:9c: f5:ee:3e:61:9e:2a:f8:ee:88:f3:84:6c:ff:59:b3: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:10:FD:0C:02:58:35:AF:0E:86:BB:2B:CB:BF:DD:14:B4:1E:09 X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c9:aa:6a:51:94:20:18:b1:df:e0:b0:94:b4:36:69:07:dc: 0f:bf:1d:70:d3:80:00:89:f8:ac:fb:20:1e:6e:a3:ef:ba:7d: 31:f9:20:9f:c4:0d:39:e9:9f:ea:9d:a5:65:c7:42:dd:55:8d: be:a0:3c:6f:83:92:76:25:2c:cf:52:bb:2f:6d:27:db:f0:39: 31:d9:da:5d:54:bb:51:d2:b7:2b:5f:a3:9c:7e:cb:bc:b7:28: d1:28:9e:e9:f3:fa:ce:4c:96:fc:55:a0:22:48:bb:7e:28:ed: 52:88:90:6f:1e:42:aa:8d:ca:eb:c2:ee:f0:7d:0a:02:7d:00: b3:3b:9f:c4:a3:54:3b:bf:34:08:79:f3:70:fb:62:eb:26:42: 41:26:02:76:fa:b6:53:61:14:b9:7d:c7:52:a0:a5:c8:f5:47: c3:e4:a1:8f:8a:c4:08:c6:2f:7c:5f:c6:7c:6f:63:60:35:fc: fc:73:d3:51:5d:50:a3:14:36:9f:b4:17:02:63:46:f6:dd:ba: d3:d9:16:9c:94:2f:b4:75:d3:1b:81:dc:24:6f:f6:fc:dd:8a: 0c:42:d0:91:44:65:a5:ec:8c:71:c5:c4:e8:d6:dd:5b:56:21: a9:7a:a3:41:f0:42:77:0f:77:7c:8a:1c:67:76:b4:88:0e:4f: 16:c5:26:de -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUCJgb99503aAtxYy8LXPK3PHdcVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjYwMzI2MDAyOTAxWhcNMjYwMzMwMDAyOTAx WjB6MUkwRwYDVQQFE0BkMTM5M2U5ODg0YWM3NjE0ZDA5MWEyOGU1MWZjMGEzNzVj OTU4NzMyYWI5NGRiOTA1MGFkN2EyNmE5ZTZlYjU2MS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC77KuNarzHnJwa105+fffZ0YYcNWrPLk6r2a41d/cGlK3K HV2Z/hXcCEzam8cAa+lDW/0RiNii1+vN8nEy6mwadF1roBZichrhVLruBlKUhWVL ExDZVPsMwxevlVj9+P+QI6xFfcavnnKV97Bkcralj5IoZ6DqdMBCOhOS8uCBH5Do cuBGzqZieyGxsxOQMeKgNYTHQv9wqVkLPJtc0rE54T3hfWnoufC8TaZj4jOHPoYT 0iGOROblSOt5/InUWAzbAEYFveHfoa8mwyBXnoWjbCqqB2+dFA96OvScWdQGBxNK +jOnuqB1EvFTh+donPXuPmGeKvjuiPOEbP9Zs8zNAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUoPkQ/QwCWDWvDoa7K8u/3RS0HgkwHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5yapq UZQgGLHf4LCUtDZpB9wPvx1w04AAifis+yAebqPvun0x+SCfxA056Z/qnaVlx0Ld VY2+oDxvg5J2JSzPUrsvbSfb8Dkx2dpdVLtR0rcrX6Ocfsu8tyjRKJ7p8/rOTJb8 VaAiSLt+KO1SiJBvHkKqjcrrwu7wfQoCfQCzO5/Eo1Q7vzQIefNw+2LrJkJBJgJ2 +rZTYRS5fcdSoKXI9UfD5KGPisQIxi98X8Z8b2NgNfz8c9NRXVCjFDaftBcCY0b2 3brT2RaclC+0ddMbgdwkb/b83YoMQtCRRGWl7IxxxcTo1t1bViGpeqNB8EJ3D3d8 ihxndrSIDk8WxSbe -----END CERTIFICATE-----Generated at Thu Mar 26 03:15:51 2026 by rpki-client